StackRadar

CVE-2022-37450

Medium

Advisory

Published 6 Aug 2022In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.012
67th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
20
of 17,781 indexed, latest versions
Container images
16
deployed by those charts
Fix available
None
affected package

Go Ethereum allows attackers to use manipulation of time-difference values to achieve replacement of main-chain blocks

Carried by container images the latest versions of 20 of 17,781 indexed charts deploy, on 16 images.

Affected packageAffected versionsFixed inImages
github.com/ethereum/go-ethereumgolangv0.0.0-20220525124254-de23cf910b81, v0.0.0-20220824090902-d901d85377c2, v0.0.0-20240220110850-1ecad30512d7, v0.0.0-20240812063842-d903330c62d7+12 moreno fix listed16
OSV records
GHSA-rqmg-hrg4-fm69

Charts affected

20 by stars
ChartLatestAffected imagesRadar Score
gethvulcanlink1.10.231 of 1See more

geth vulcanlink 1.10.23

1 of the 1 container images this version deploys carry CVE-2022-37450.

Container imageDigestPackageFixed in
ethereum/client-go:v1.10.23cce21b423165
github.com/ethereum/go-ethereum@v0.0.0-20220824090902-d901d85377c2
no fix listed

Open the chart page →

2,245
gethdysnixVerified publisher1.1.21 of 1See more

geth dysnix 1.1.2

1 of the 1 container images this version deploys carry CVE-2022-37450.

Container imageDigestPackageFixed in
ethereum/client-go:v1.14.8886ec69b35b0
github.com/ethereum/go-ethereum@v0.0.0-20240812121616-a9523b642823
no fix listed

Open the chart page →

1,624
genesis-generatorethereum-helm-chartsVerified publisher0.2.31 of 2See more

genesis-generator ethereum-helm-charts 0.2.3

1 of the 2 container images this version deploys carry CVE-2022-37450.

Container imageDigestPackageFixed in
skylenet/ethereum-genesis-generator:latest210353ce7c89
github.com/ethereum/go-ethereum@v1.10.9
no fix listed

Open the chart page →

3,135
evm-rollupastria4.1.01 of 2See more

evm-rollup astria 4.1.0

1 of the 2 container images this version deploys carry CVE-2022-37450.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astria-geth:latest4249e403225a
github.com/ethereum/go-ethereum@v0.0.0-20250624232003-d391a0fa9b2e
no fix listed

Open the chart page →

3,980
evm-stackastria5.0.31 of 2See more

evm-stack astria 5.0.3

1 of the 2 container images this version deploys carry CVE-2022-37450.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astria-geth:latest4249e403225a
github.com/ethereum/go-ethereum@v0.0.0-20250624232003-d391a0fa9b2e
no fix listed

Open the chart page →

3,980
flame-rollupastria0.1.31 of 2See more

flame-rollup astria 0.1.3

1 of the 2 container images this version deploys carry CVE-2022-37450.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/flame:0.1.0c8af1c5aae40
github.com/ethereum/go-ethereum@v0.0.0-20250307182047-684bbef76344
no fix listed

Open the chart page →

3,680
basechronicleVerified publisher0.0.81 of 1See more

base chronicle 0.0.8

1 of the 1 container images this version deploys carry CVE-2022-37450.

Container imageDigestPackageFixed in
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
github.com/ethereum/go-ethereum@v0.0.0-20241213110027-efa05b1bf5c2
no fix listed

Open the chart page →

4,810
bordysnixVerified publisher0.0.81 of 1See more

bor dysnix 0.0.8

1 of the 1 container images this version deploys carry CVE-2022-37450.

Container imageDigestPackageFixed in
0xpolygon/bor:1.3.7396d3de26d8b
github.com/ethereum/go-ethereum@v0.0.0-20240812063842-d903330c62d7
no fix listed

Open the chart page →

1,365
geth-swapethersphereVerified publisher0.6.31 of 2See more

geth-swap ethersphere 0.6.3

1 of the 2 container images this version deploys carry CVE-2022-37450.

Container imageDigestPackageFixed in
ethereum/client-go:v1.10.186d6d12a40465
github.com/ethereum/go-ethereum@v0.0.0-20220525124254-de23cf910b81
no fix listed

Open the chart page →

4,756
onboarding-faucetethersphereVerified publisher0.2.01 of 1See more

onboarding-faucet ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-37450.

Container imageDigestPackageFixed in
ethersphere/onboarding-faucet:0.3.0513154aab230
github.com/ethereum/go-ethereum@v1.10.8
no fix listed

Open the chart page →

3,320
l2gethinfradao0.0.11 of 1See more

l2geth infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-37450.

Container imageDigestPackageFixed in
ethereumoptimism/l2geth:0.5.315577036dc36d
github.com/ethereum/go-ethereum@v1.10.16
no fix listed

Open the chart page →

2,659
chaos-meshkubesphere-stable2.5.11 of 3See more

chaos-mesh kubesphere-stable 2.5.1

1 of the 3 container images this version deploys carry CVE-2022-37450.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.5.1cf78fdf7403a
github.com/ethereum/go-ethereum@v1.10.2
no fix listed

Open the chart page →

8,555
cachelavaOfficialVerified publisher1.1.11 of 1See more

cache lava 1.1.1

1 of the 1 container images this version deploys carry CVE-2022-37450.

Container imageDigestPackageFixed in
ghcr.io/lavanet/lava/lavap:v2.5.089028adefcff
github.com/ethereum/go-ethereum@v1.10.18
no fix listed

Open the chart page →

1,378
firehose-ethereumnodeifyVerified publisher1.7.11 of 2See more

firehose-ethereum nodeify 1.7.1

1 of the 2 container images this version deploys carry CVE-2022-37450.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
github.com/ethereum/go-ethereum@v0.0.0-20260217182555-6cf2f05a5b11+dirty
no fix listed

Open the chart page →

5,565
firehose-ethereumpinaxVerified publisher0.3.21 of 2See more

firehose-ethereum pinax 0.3.2

1 of the 2 container images this version deploys carry CVE-2022-37450.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
github.com/ethereum/go-ethereum@v0.0.0-20250725230142-195b2bec9190+dirty
no fix listed

Open the chart page →

7,062
chainrss30.1.281 of 8See more

chain rss3 0.1.28

1 of the 8 container images this version deploys carry CVE-2022-37450.

Container imageDigestPackageFixed in
rss3/op-geth:rss3-main-1ecad3026148aa1bc52
github.com/ethereum/go-ethereum@v0.0.0-20240220110850-1ecad30512d7
no fix listed

Open the chart page →

8,528
vsl-chainrss30.1.01 of 7See more

vsl-chain rss3 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-37450.

Container imageDigestPackageFixed in
rss3/op-geth:rss3-main-1ecad3026148aa1bc52
github.com/ethereum/go-ethereum@v0.0.0-20240220110850-1ecad30512d7
no fix listed

Open the chart page →

6,044
vsl-rpcrss30.3.41 of 4See more

vsl-rpc rss3 0.3.4

1 of the 4 container images this version deploys carry CVE-2022-37450.

Container imageDigestPackageFixed in
rss3/op-geth:rss3-main-1ecad3026148aa1bc52
github.com/ethereum/go-ethereum@v0.0.0-20240220110850-1ecad30512d7
no fix listed

Open the chart page →

4,610
vsl-sequencerrss30.3.41 of 4See more

vsl-sequencer rss3 0.3.4

1 of the 4 container images this version deploys carry CVE-2022-37450.

Container imageDigestPackageFixed in
rss3/op-geth:rss3-main-1ecad3026148aa1bc52
github.com/ethereum/go-ethereum@v0.0.0-20240220110850-1ecad30512d7
no fix listed

Open the chart page →

4,610
eth-validatorwateim1.4.51 of 3See more

eth-validator wateim 1.4.5

1 of the 3 container images this version deploys carry CVE-2022-37450.

Container imageDigestPackageFixed in
ethereum/client-go:latest37575ec10fbc
github.com/ethereum/go-ethereum@v0.0.0-20260904203113-d799b1a3f20f+dirty
no fix listed

Open the chart page →

4,998

Container images carrying it

16 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
rss3/op-geth:rss3-main-1ecad3026148aa1bc52
github.com/ethereum/go-ethereum@v0.0.0-20240220110850-1ecad30512d7
no fix listed
4
ghcr.io/astriaorg/astria-geth:latest4249e403225a
github.com/ethereum/go-ethereum@v0.0.0-20250624232003-d391a0fa9b2e
no fix listed
2
0xpolygon/bor:1.3.7396d3de26d8b
github.com/ethereum/go-ethereum@v0.0.0-20240812063842-d903330c62d7
no fix listed
1
ethereum/client-go:latest37575ec10fbc
github.com/ethereum/go-ethereum@v0.0.0-20260904203113-d799b1a3f20f+dirty
no fix listed
1
ethereum/client-go:v1.10.186d6d12a40465
github.com/ethereum/go-ethereum@v0.0.0-20220525124254-de23cf910b81
no fix listed
1
ethereum/client-go:v1.14.8886ec69b35b0
github.com/ethereum/go-ethereum@v0.0.0-20240812121616-a9523b642823
no fix listed
1
ethereum/client-go:v1.10.23cce21b423165
github.com/ethereum/go-ethereum@v0.0.0-20220824090902-d901d85377c2
no fix listed
1
ethereumoptimism/l2geth:0.5.315577036dc36d
github.com/ethereum/go-ethereum@v1.10.16
no fix listed
1
ethersphere/onboarding-faucet:0.3.0513154aab230
github.com/ethereum/go-ethereum@v1.10.8
no fix listed
1
skylenet/ethereum-genesis-generator:latest210353ce7c89
github.com/ethereum/go-ethereum@v1.10.9
no fix listed
1
ghcr.io/astriaorg/flame:0.1.0c8af1c5aae40
github.com/ethereum/go-ethereum@v0.0.0-20250307182047-684bbef76344
no fix listed
1
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
github.com/ethereum/go-ethereum@v0.0.0-20241213110027-efa05b1bf5c2
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.5.1cf78fdf7403a
github.com/ethereum/go-ethereum@v1.10.2
no fix listed
1
ghcr.io/lavanet/lava/lavap:v2.5.089028adefcff
github.com/ethereum/go-ethereum@v1.10.18
no fix listed
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
github.com/ethereum/go-ethereum@v0.0.0-20250725230142-195b2bec9190+dirty
no fix listed
1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
github.com/ethereum/go-ethereum@v0.0.0-20260217182555-6cf2f05a5b11+dirty
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.